ZyXEL Communications ZyWall 35 Support Notes page 259

2. Proactively Prevent Phishing
Phishing – The act of sending an email to a user falsely claiming to be an established legitimate enterprise
in an attempt to scam the user into surrendering private information that will be used for identity theft.
With the combination of CF and AS services in ZyWALL 5 UTM, network administrator can dramatically
lower the chance of company network users from receiving possible phishing emails and also prevent users
from accessing known phishing websites.
2.1 Setting up the ZyWALL 5 UTM CF+AS service to prevent phishing
CF+AS License Activation
In Registration page, if you already have an account exist in myZyXEL.com, then all you have to do is,
first select "Existing myZyXEL.com account" and enter your username password, and select Content
Filter 1 month and AS 3 months trial version to activate
2.2 Setup the ZyWALL 5 UTM CF service to block the known phishing web sites
2.2.1 The General settings:
1. In CONTETN FILTER ->General, check the Enable Content Filter check box to enable CF
function.
2. In Schedule to Block, select the Always Block to let CF engine to do blocking the web sites.
3. In Message to display when a site is blocked, you can input the text, say "(Website Blocking)", to
remind the users that the website he is trying to access is blocked. And you can input the URL in the
Redirect URL field, for example, "www.zyxel.com" to redirect the original URL to this redirect- URL.
4. In Exempt Computers item, we can select Exclude specified address ranges from the content filter
enforcement to NOT apply content filter policies to the specified IP address ranges, for example, if the
CEO's computer which is assigned an IP address: 192.168.10.200 needed NOT to be applied by CF
engine, the IT staff can add this IP address 192.168.10.200 to the list to meet this exclusion
requirement.
All contents copyright (c) 2006 ZyXEL Communications Corporation.
ZyWALL 35 Support Notes
259